Security audit

Smart Memory Query

Security checks for vulnerabilities and agentic risk

Overview

This skill is transparent about what it does, but it would automatically search persistent agent memory far more often than most users would expect.

Install only if you are comfortable with the agent proactively searching stored memory on most tasks and on mentions of names, services, tools, or projects. Users handling sensitive or compartmentalized work should prefer a narrower memory skill that searches only when prior context is explicitly relevant or requested.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:2
Finding: Compulsory Broad Access to Persistent Agent Memory
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill is configured with always: true and broad triggers such as any new task or any proper noun, which makes it activate on a large fraction of normal conversations. This can cause unnecessary memory lookups, expanding access to prior user context even when not needed and increasing the chance of privacy over-collection, prompt steering, or degraded agent behavior through excessive tool use.
Content: No source excerpt is available for this finding.

Static analysis

Detected: suspicious.privileged_always

Skill is configured with always=true (persistent invocation).

Warn

Code: suspicious.privileged_always
Location: SKILL.md:1